Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-21_361510194b9858c85f465043d22e96b5_cryptolocker

  • Size

    55KB

  • Sample

    240521-kdw9bsef32

  • MD5

    361510194b9858c85f465043d22e96b5

  • SHA1

    bcd79ebb5a17f9994a64d8f936038ecce013a214

  • SHA256

    e261d12990953c728f8d9819693852ee8737427a65123014261d6c017c5ec60f

  • SHA512

    25fd17ca82f1d010dc08254cf55c81ee4aed6bdc22c2c8845aa529b2304ba5c908794df18226de218db9cd5cdd666ff4b313fa0afcd8931c227462d0b1affcd6

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO5UjL:ZVxkGOtEvwDpjcm

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_361510194b9858c85f465043d22e96b5_cryptolocker

    • Size

      55KB

    • MD5

      361510194b9858c85f465043d22e96b5

    • SHA1

      bcd79ebb5a17f9994a64d8f936038ecce013a214

    • SHA256

      e261d12990953c728f8d9819693852ee8737427a65123014261d6c017c5ec60f

    • SHA512

      25fd17ca82f1d010dc08254cf55c81ee4aed6bdc22c2c8845aa529b2304ba5c908794df18226de218db9cd5cdd666ff4b313fa0afcd8931c227462d0b1affcd6

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO5UjL:ZVxkGOtEvwDpjcm

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks